Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eda8cbaf-dda3-397a-ac94-63cbb3faa938.roa
File:                     eda8cbaf-dda3-397a-ac94-63cbb3faa938.roa (raw, json)
Hash identifier:          rAt4YqqPCMryPP3YNOKMUlprMCvfycMACTwKWBEq82g=
Subject key identifier:   69:F4:29:96:64:8E:5B:5C:C2:AC:BF:0A:34:DC:D3:61:96:69:D0:23
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C24620FA5E488F53ABB2580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eda8cbaf-dda3-397a-ac94-63cbb3faa938.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1007:d000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:62:0f:a5:e4:88:f5:3a:bb:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=2f29cd98-7fb0-474d-a27f-4891c8cffba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a0:1a:14:2c:6b:8f:5b:94:fb:97:9c:6e:5c:
                    60:4f:0f:15:43:61:83:78:8f:f1:de:65:c5:b5:64:
                    de:4c:8c:92:a8:46:5e:86:b3:bf:52:b6:b4:ac:2c:
                    59:15:7f:ff:a9:ed:ca:5d:ac:15:52:c0:8a:ac:0a:
                    79:38:4f:c8:c5:c2:94:1e:fe:a5:23:47:0c:79:20:
                    81:10:3b:f3:0d:1b:da:ff:a3:af:f3:d8:ca:d6:b6:
                    f4:13:85:35:36:4e:79:3b:cb:9d:34:4f:fb:55:75:
                    60:96:35:ec:ad:9c:e7:e9:88:b4:99:7a:be:87:61:
                    e6:b0:82:ce:be:f1:14:0e:f9:8c:40:a7:12:57:7f:
                    55:c0:96:e3:30:ad:19:b5:70:41:35:09:99:c8:c8:
                    51:1a:18:2c:ad:98:c1:40:d0:65:d4:6c:ea:f0:58:
                    f8:dc:01:d9:a6:79:f8:fe:a9:4c:35:98:5d:23:f0:
                    76:aa:17:38:86:68:80:96:fb:e6:df:95:02:ab:47:
                    16:19:33:66:1d:6b:4c:e5:02:c5:22:9f:9e:64:31:
                    46:11:d8:3e:18:c7:17:b5:52:db:2f:71:77:25:02:
                    2b:58:7a:77:3d:1a:81:ac:b3:a4:5a:d8:07:a6:05:
                    3c:d9:28:c1:cf:11:97:fc:b6:dc:46:d2:4f:55:eb:
                    d1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F4:29:96:64:8E:5B:5C:C2:AC:BF:0A:34:DC:D3:61:96:69:D0:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eda8cbaf-dda3-397a-ac94-63cbb3faa938.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1007:d000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:63:e2:5b:e2:b1:54:9d:c2:d4:cc:42:25:5a:b6:05:b5:f8:
         8d:0c:5d:e9:a2:f8:35:cb:75:1b:5b:cb:5e:1a:6b:9b:e0:53:
         eb:dd:6c:0b:ee:8a:98:4d:f9:00:d2:36:54:70:b0:72:65:f4:
         2c:59:fb:cb:ed:a7:28:95:e0:03:9a:de:89:3f:f3:eb:21:c6:
         a5:b3:dd:15:10:32:37:bd:99:81:7c:9c:96:36:6c:ca:46:42:
         1c:ec:f4:25:c4:00:3f:21:0e:38:c4:c0:c8:91:77:d0:ab:38:
         bc:b3:e5:1b:71:f6:12:ee:59:55:41:08:2e:fa:ca:ef:c2:2b:
         be:41:5b:7e:10:27:e6:b1:64:64:e8:b2:d0:b9:48:b6:63:8b:
         cc:a7:f9:4a:c8:7a:70:2f:c8:b9:67:94:0f:09:de:6d:b8:b2:
         80:b2:7b:68:7d:2c:16:cb:1c:3d:0f:68:9d:ae:1e:c4:8e:22:
         b0:96:50:b5:2b:6f:14:c8:7e:8a:0d:16:71:17:a5:10:4b:5d:
         df:02:a8:b0:9a:93:29:eb:38:e1:95:e7:ce:15:8d:49:78:53:
         bb:56:3c:4e:ea:56:86:2a:5e:1f:fe:34:95:33:b0:b2:53:4c:
         a4:e9:9f:6d:4e:f3:f8:4e:d2:42:77:d0:71:49:8b:6f:d4:7f:
         62:9a:88:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:37:57 2025 by rpki-client